Vulnerabilities in Zipato smart home devices let hackers open doors

guest · Jul 3, 2019

Vulnerabilities in Zipato smart home devices let hackers open doors
July 2, 2019
https://siliconangle.com/2019/07/02...to-smart-home-devices-let-hackers-open-doors/

Two security researchers have published details of vulnerabilities in communications hubs that connect to smart home locks manufactured by Zipato that can allow hackers to open doors easily.

Detailed today by Chase Dardaman and Jason Wheeler at Blackmarble, two of the vulnerabilities relate to the design and implementation of the authentication mechanism in the Zipato application programming interface. A third relates to an insecure embedded SSH private key that provides root access.
All three vulnerabilities can be exploited by hackers to gain access to doors secured by Zipato smart home locks.

The SSH vulnerability in the Zipomicro hubs gained particular attention. Kevin Bocek, vice president of security strategy and threat intelligence at cybersecurity firm Venafi Inc. told SiliconANGLE that smart home controllers that use the same, hard-coded SSH machine identity everywhere are a massive security risk.
Click to expand...

Log in or Sign up

Vulnerabilities in Zipato smart home devices let hackers open doors

guest Guest

Log in or Sign up

Vulnerabilities in Zipato smart home devices let hackers open doors

guest Guest

Useful Searches